← back
CVE-2023-6928

Improper Restriction of Excessive Authentication Attempts

CVSS 9.8 CRITICALEPSS 0.8%CWE-307
Vexday Risk Score
28Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 9.8EPSS 0.8%KEV nãoPoC Nuclei Metasploit Patch
Lifecycle
19 Dec 2023Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
EuroTel ETL3100 versions v01c01 and v01x37 does not limit the number of attempts to guess administrative credentials in remote password attacks to gain full control of the system.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
EuroTel · ETL3100

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →